CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes Fortinet has disclosed a critical FortiMail zero-day vulnerability that attackers are already exploiting in the wild. Tracked as CVE-2026-104286 and rated 9.8 on the CVSS scale, the flaw enables an unauthenticated remote attacker to write arbitrary files to the underlying system by sending specially crafted HTTP or HTTPS requests. The vulnerability poses a significant risk […] The post CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes appeared first on SOC Prime . Pulse ID: 6ac3e4c60b5f3d6ef7c5140a Pulse Link: https://otx.alienvault.com/pulse/6ac3e4c60b5f3d6ef7c5140a Pulse Author: CyberHunter_NL Created: 2026-10-05 17:56:22 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #CVE2026104286 #ZeroDay #HTTP #HTTPS #OTX #CyberHunter_NL